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IN THE CLAIMS 

Claims 1-6. (Withdrawn) 

7. (Currently Amended) A method of securely receiving content data on a user's system 
from a web broadcast infrastructure with a plurality of channels, the method comprising 
the steps of: 

receiving promotiona l m e tadata encrvpted content data f rom a f i rst w e b 
broadcast channel , wherein the encrypted content data is encrypted with a first 
encrypting key having a corresponding first decrypting ke y th e promotional m e tad a ta 
re l at e d to oncryptod cont e nt data; 

Qcsomb l ing at l east p a rt of th e promotional m e tadata into a promotiona l off e ring 

for r e vi e w by a us e r; 

s e lecting by a uoor, e ncrypt e d content data to b e r e c e iv e d r e lat e d to th e 

promotiona l off e r i ng metadata ; 

executing an emulator to enable a single player application of the encrypted 
content data to receive content data over the broadcast channel as rf the single player 
application is receiving the encrypted content data from a telecommunication 
infrastructure, thereby enabling the single player application to perform the following 
steps regardless from where the encrypted content has been received: 

rotriov i ng th e e ncrypted cont e nt data from a us e r's syst e m v i a a s e cond 
chann e l, th e e ncrypt e d cont e nt data se l ect e d from th e promotiona l m e tad a ta, 
and wh o r oi n th e e ncrypted cont e nt data ha s- b ee n pr e vious l y e norypt e d us i ng a 
f i rst encrypting k e y, wh e r e in th e first e ncrypting k e y is a symm e tr i c key w i th a 
correspond i ng first d e crypting koy, wh e r ei n th e s e cond chann e l is s ele ct e d from 
th e group concicting of a t ele commun i cations n e twork, a broadcast transm i ssion, 
and a comput e r r e mov a ble storag e m e dium; 

receiving th o first d e crypting k e y v i a a comput e r r e adab le m e dium, th e 
f i rst decrypt i ng key for d e crypting a t le a s t some of the oncryptod cont e nt data 
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rocoiv e d v i a tho cGCond w e b bro a dca s t chann el , whor e in th e f i rst d e crypting k e y 
has b ee n e ncrypted with a s e cond e ncrypting k e y of a trusted th i rd party j 

transferring to a tnjsted third party ant he encrypted first decrypting key, 
which has been encrypted with athe second encrypting key of the trusted third 
part y , to tho tru o t o d th i rd party ; 

receiving the encrypted first decrypting key, which has been decrypted by 
the trusted third party and re-encrypted with a user's system key; and 

decrypting, on th e u se r's syst e m in a tamper resistant environment of the 
single player application , the encrypted first decrypting key with the user's 
system key. 

8. (Currently Amended) The method as defined in claim 7, whoroin th e st e p of 
aoc e mb l ing at le ast port of th e promot i ona l data i nc l ud e s ass e mb li ng at l oast part of th e 
promotiona l data into a form a t roadab le by a w e b brows e r and wh e r ei n tho stop of 
r . ninnting i nn l ud e s G olo cting with a w e b brow se F further comprising receiving the 
encrypted first decrypting key over a computer readable medium which is different than 
the web broadcast channel . 

9. (Currently Amended) The method as defined in claim 7, wherein the step of 
CQlecting receiving includes s ele cting promotiona l mat e ria l that has b ee n previously 
fQ co i v o d and stor e d storino on the user's system the encn/pted content data for later 
decrypting bv the piaver application . 

10. (Currently Amended) The method as defined in claim 9, wherein the step of 
Goloctinq receiving the encrypted content data further comprises the sub-steps of: 

detemnining a schedule for next web-broadcast of the encrypted content data 
selected; 

setting a trigger to trigger the user's system to receive the next web- broadcast 
o n th e s e cond channe l of the encrypted content data selected . 
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1 1 . (Currently Amended) The method as defined in claim 10, further comprising: 

receiving promotional metadata related to the encrypted content data over the 
broadcast channel: 

selecting bv a user encrypted content data to be received related to the 
promotional offering metadata: 

wherein the step of retr ie ving receiving encrypted content data includes receiving 
encrypted content data from a second broadcast channel , inc l ud es r e ceiv i ng th e 
encrypt e d content data selected from the promotional metadata on a^we bthe second 
broadcast channel and a time provided by the trigger. 

12. (Currently Amended) The method as defined in claim ?11, wherein the step of 
otrievino receiying encrypted content data from a second channel includes receiving 
data in a format compatible with DirecPC™. 

13. (Currently Amended) The method as defined claim 711. wherein the step of 
receiving data from a second channel includes the sub-step of: 

authorizing over a back channel that the user's system is authorized to receive 
the encrypted content d ata selected; and wherein the step of receiving the encrypted 
first decrypting key includes receiving the encrypted fi rst decrypting key only if the 
user's system is authorized by the trusted third party t o receive the encrypted content 
data selected. 

14. (Currently Amended) The method as defined claim 711. wherein the step of 
receiving encrypted content data from a second channel further includes the sub-step 
of: 

Not i fyino presenting to the user^ the next time the user starts the user's system^ a 
status if the current encrypted content d ata selected from the promotional metadata has 
been received on the user's system. 
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15. (Previously Presented) The method as defined in claim 7, wherein the step of 
receiving the encrypted content data, includes receiving the encrypted content data 
along with a network address of the trusted third party. 

16. (Currently Amended) The method as defined in claim 15, wh e r e in th e st e p of 7 
further comprising receiving the encrypted f irst decrypting key i nc l ud e s receiving tho 
fir s t d e crypting k e y over a broadcast stream. 

17. (Currently Amended) The method defined in claim 45 7, wherein the n e twork 
addr e ss of tho trusted th i rd party is an addr e ss of a c le ar i nghous e tamper resistant 
environment forms reencrvpted content data bv reencrvpting the content data with a 
locally generated digita l cont e n t-plaver application encrypting key, wherein the locally 
generated player application key reguires less processing utilization than the first 
decrypting key to provide real-time decryption of the content data . 

18. (Currently Amended) The method defined in claim 15, wherein the first decrypting 
key has a timeout provision for decrypting the content data. 

Claims 19-20. (Withdrawn) 

21. (Curently Amended) A user's system for securely receiving data from a web 
broadcast infrastructure with a plurality of channels, comprising: 

a receiver for receiving promotional metadata from a first w e b broadcast 
channel, the promotional metadata related to data available for reception; 

aft int e rface to an output dovico for pr e s e nt i ng at le ast part of th e promot i ona l 

m e tadata for rev i ew by a us e r; 

an i nt e rfaoo to on input d e vic e for r e c ei ving o soioot i on by a us e r of th e data to 

b e r e c ei v e d r o tated to the promot i onal m e tadata; 
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a controller for controlling the receiver to receive encrypted content data from 
thea cocond web broadcast channel, the encrypted content d ata selected fronn the 
promotional metadata, and wherein the encrypted content d ata has been previously 
encrypted using a first encrypting key , whore i n th e first e ncrypt i ng k e y i s a oymmetrio 
key wit hhavinq a corresponding first decrypting key ;, whoroin tho s e cond chann el is 
soleot e d from th e group cons i st i ng of a t el ocommunicat i on o network, a broadcaot 
t ransm i sGion, and a comput e r romovab le storag e m e d i um; and 

_ an i nt e rface for rece i ving th e f i rst d e crypt i ng koy v i a a comput e r r e adab le 

mod i um. tho first decrypt i ng key for decrypting at l east c om e of th e data r e c e iv e d via 
th e second wob broadcast chann el, wherein the first decrypting key has been encrypted 
with a second encrypting key of a trusted third party; 

a single plaver application for rendering the encrypted content data: 

an emulator to enable the single player application of the encrypted content data 
to receive content data over the broadcast channel as if the single plaver application is 
receiving the encrypted content data from a telecommunication infrastructure, thereby 
enabling the single plaver application to perform the following steps regardless from 
where the encrypted content has been received: 

transferring to the trusted third party t he encrypted first decrypting key, 

which has been encrypted with the second encrypting ke y to th e tru s t e d th i rd 

patty, 

receiving the encrypted first decrypting key, which has been decrypted by 
the trusted third party and re-encrypted with a user's system key; and 

decrypting, in a tamper resistant environment of the single plaver 
application, the encrypted first decrypting key with the user's system key, 

decrypting, on the user*s system in a tamper resistant environment, the 
encrypted first decrypting key with the user's system key; 
wherein the tamper resistant environment forms reencrypted content data by 
reencrypting the content data with a locally generated d i g i ta l cont e nt p layer application 
encrypting ke y, wherein the locally generated player application key reouires less 

Docket No. SE9-99-020 Page 6 of 1 2 S/N 09/487,41 7 



PAGE 8/14 * RCVD AT ^0^5f2005 3:06:47 PM [Eastern Daylight Time] " 8VR:U8FTO-EFXRF-6/31 * [>NIS:273S300 * CStD:S01 989 9812 " DURATION (inm-s5):04-42 



10/05/2005 15:01 561-989-9812 



FLEIT KAIN ET AL. 



PAGE 09/1^1 



processing utilization than the first decrypting key to provide real-time decryption of the 
content data . 

22. (Cun^ently Amended) The user's system as defined in claim 21, wherein the output 
dovio e i s a w e b browoor and th e i nput d e vico i s coup le d to tho wob brows e r for 
rnn ni ving a Goloction by a us e r t he encrypted content data, includes a network address 
of the tmsted third party . 

23. (Currently Amended) The user's system as defined in claim 21, wherein the 
controller further comprises: 

a schedule deriyed from the promotional metadata wherein the schedule is used 
to control the receiver to receive encrypted content d ata from a ceoond w e b t he 
broadcast channel. 

24. (Currently Amended) The user^s system as defined in claim 21 , wherein the receiver 
is adapted to receive encrypted content data broadcasted in a format compatible with 
DirecPC™. 

Claim 25 (Withdrawn) 
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